Veille CVE

Mardi 4 août 2026

3 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2026-34486 7.5 Élevée Exploitée

    Apache Software Foundation Apache Tomcat · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat Enterprise Linux 7 Extended Lifecycle Support

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

  2. CVE-2026-9198 – Non évaluée Exploitée

    IBM Langflow

    IBM Langflow Code Injection Vulnerability — Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

  3. CVE-2026-18556 – Non évaluée Exploitée

    N-able N-central

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability — N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.